Lawful  Interception  System 


Efficient  IP  target  monitoring 


System 


Conform  to  lawful  interception  standards  (ET5I) 

► No  Impact  on  monitored  network  performance 
Seamless  integration  into  ISP's  infrastructure 
Wire-speed,  zero  loss  input  traffic  processing 

► Dynamic  target  identification  (DHCP,  RADIUS) 

► Unified  management  for  all  system  components 
Up  to  1000  IPv4  and  1000  IPv6  active  targets 
Hardware  accelerated  probes  for  lOGbE 

► Support  for  several  independent  LEAs 

► Continuous  enhancements  and  support 
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Widespread  information  technologies  provide  fast  and 
dynamic  communication  media  even  for  criminals  and 
terrorists.  To  be  able  to  guarantee  public  safety,  law 
enforcement  agencies  (LEAs)  need  to  identify,  intercept 
and  analyze  the  content  of  the  malicious  communication. 
INVEA-TECH  provides  law  enforcement  and  government 
agencies  with  the  state  of  the  art  technology  to  solve  the  hey 
part  of  the  investigation  process.  INVEA-TECH  LI  System 
is  the  ideal  instrument  for  collecting  evidence  from 
wired  IP-based  networhs. 


syst™  description 


Architecture  and  implementation  of  the  LI  System  follows 
international  standards  closely  while  beeping  high  flexibility 
of  the  whole  system  Therefore  it  can  be  deployed  in 
different  countries  over  the  world  and  also  easily  modified 
to  meet  national  legislative. 


ETSI  LI  standards  conformance 

Easy  third-party  monitoring  centers  integration 

Dynamic  target  identification  (DHCP,  RADIUS) 

Hardware  accelerated  wire-speed  IOC  probes 
Centralized  control  over  whole  system 
Support  for  several  independent  LEAs 
Up  to  1000  IPv4  and  1000  IPv6  active  targets 
Encrypted  communication  and  authentication 
Easily  adaptable  to  national  legislative 
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INTERCEPTION  PROBE 

Interception  probe  is  the  essential  element  of  the  system. 

It  is  processing  networh  traffic  and  searching  for  the  traffic 
of  interest.  All  intercepted  traffic  is  forwarded  to  mediation 
device  for  conversion  to  handover  format. 


LI  system  consists  of  two  main  components  - interception 
probes  and  mediation  device  - which  are  deployed  at  ISP's 
site.  Interconnection  of  the  components  and  schematic 
installation  are  shown  in  the  picture.  Whole  system  is 
managed  through  easy-to-use  web  interface  compatible 
with  all  most-used  web  browsers. 


The  interception  probes  are  located  at  input  part  of  the 
processing  chain.  Traffic  interception  is  based  on  the 
provisioned  targets  and  their  dynamic  identification  by 
analysis  of  AAA  (RADIUS,  DIAMETER)  or  host  control 
(DHCP)  systems.  Their  non-intrusive  installation  and  passive 
operation  mode  guarantee  invisibility  in  the  networh. 
Handover  of  the  intercepted  data  is  performed 
by  mediation  device.  Mediation  device  encapsulates  data 
stream  into  standardized  format  and  forwards  it  to  LEA 
for  further  processing. 


MEDIATION  DEVICE 


RADIUS,  DHCP 


INTERCEPTION  PROBES 


rifts 


► Full-duplex  10  Gbps  line  monitoring 
* LR,  SR  fiber  optics  supported 

► Data  export  over  dedicated  1 Gbps  interface 
Support  for  L2  protocols  (MPLS,  VLAN,  QinQ) 

► Standard  rack-mountable  form  Factor 


MEDIATION  DEVICE 


Mediation  device  is  the  central  part  of  the  lawful  intercep- 
tion system.  It  is  scalable  and  allows  to  increase  volume 
of  intercepted  traffic  as  well  as  number  of  controlled 
interception  probes. 


Support  for  standardized  handover  interfaces 
Handles  multiple  interception  probes 
User  friendly  management  interface 
Standard  rack-mountable  form  Factor 


ORDERING  INFORMATION 


Please  contact  INVEA-TECH  for  pricing  and  additional 
information  about  this  product. 
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